@@ -120,31 +120,33 @@ class Binding
120120 # members` can have the following values: * `allUsers`: A special identifier
121121 # that represents anyone who is on the internet; with or without a Google
122122 # account. * `allAuthenticatedUsers`: A special identifier that represents
123- # anyone who is authenticated with a Google account or a service account. * `
124- # user:`emailid``: An email address that represents a specific Google account.
125- # For example, `[email protected] ` . * `serviceAccount:`emailid``: An email 126- # address that represents a Google service account. For example, `my-other-app@
127- # appspot.gserviceaccount.com`. * `serviceAccount:`projectid`.svc.id.goog[`
128- # namespace`/`kubernetes-sa`]`: An identifier for a [Kubernetes service account](
129- # https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-
130- # accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`
131- # . * `group:`emailid``: An email address that represents a Google group. For
132- # example, `[email protected] `. * `deleted:user:`emailid`?uid=`uniqueid``: An 133- # email address (plus unique identifier) representing a user that has been
134- # recently deleted. For example, `[email protected] ?uid=123456789012345678901`. 135- # If the user is recovered, this value reverts to `user:`emailid`` and the
136- # recovered user retains the role in the binding. * `deleted:serviceAccount:`
137- # emailid`?uid=`uniqueid``: An email address (plus unique identifier)
138- # representing a service account that has been recently deleted. For example, `
139- # [email protected] ?uid=123456789012345678901`. If the 140- # service account is undeleted, this value reverts to `serviceAccount:`emailid``
141- # and the undeleted service account retains the role in the binding. * `deleted:
142- # group:`emailid`?uid=`uniqueid``: An email address (plus unique identifier)
143- # representing a Google group that has been recently deleted. For example, `
144- # [email protected] ?uid=123456789012345678901`. If the group is recovered, this 145- # value reverts to `group:`emailid`` and the recovered group retains the role in
146- # the binding. * `domain:`domain``: The G Suite domain (primary) that represents
147- # all the users of that domain. For example, `google.com` or `example.com`.
123+ # anyone who is authenticated with a Google account or a service account. Does
124+ # not include identities that come from external identity providers (IdPs)
125+ # through identity federation. * `user:`emailid``: An email address that
126+ # represents a specific Google account. For example, `[email protected] ` . * ` 127+ # serviceAccount:`emailid``: An email address that represents a Google service
128+ # account. For example, `[email protected] `. * ` 129+ # serviceAccount:`projectid`.svc.id.goog[`namespace`/`kubernetes-sa`]`: An
130+ # identifier for a [Kubernetes service account](https://cloud.google.com/
131+ # kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-
132+ # project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:`emailid``: An
133+ # email address that represents a Google group. For example, `[email protected] ` 134+ # . * `deleted:user:`emailid`?uid=`uniqueid``: An email address (plus unique
135+ # identifier) representing a user that has been recently deleted. For example, `
136+ # [email protected] ?uid=123456789012345678901`. If the user is recovered, this 137+ # value reverts to `user:`emailid`` and the recovered user retains the role in
138+ # the binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email
139+ # address (plus unique identifier) representing a service account that has been
140+ # recently deleted. For example, `[email protected] ?uid= 141+ # 123456789012345678901`. If the service account is undeleted, this value
142+ # reverts to `serviceAccount:`emailid`` and the undeleted service account
143+ # retains the role in the binding. * `deleted:group:`emailid`?uid=`uniqueid``:
144+ # An email address (plus unique identifier) representing a Google group that has
145+ # been recently deleted. For example, `[email protected] ?uid= 146+ # 123456789012345678901`. If the group is recovered, this value reverts to `
147+ # group:`emailid`` and the recovered group retains the role in the binding. * `
148+ # domain:`domain``: The G Suite domain (primary) that represents all the users
149+ # of that domain. For example, `google.com` or `example.com`.
148150 # Corresponds to the JSON property `members`
149151 # @return [Array<String>]
150152 attr_accessor :members
0 commit comments